Lucene search

K
mageiaGentoo FoundationMGASA-2013-0335
HistoryNov 21, 2013 - 12:38 a.m.

Updated krb5 package fixes security vulnerabily

2013-11-2100:38:57
Gentoo Foundation
advisories.mageia.org
13

0.936 High

EPSS

Percentile

99.1%

If a KDC serves multiple realms, certain requests can cause setup_server_realm() to dereference a null pointer, crashing the KDC. This can be triggered by an unauthenticated user (CVE-2013-1418).

OSVersionArchitecturePackageVersionFilename
Mageia2noarchkrb5< 1.9.2-2.7krb5-1.9.2-2.7.mga2